Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: rf31AgUnkPEtsP/TmJcZTGqJft+y7de7gmqvukr2PvM=
Subject key identifier: BF:2F:C0:CF:61:20:3D:E4:61:C1:76:C5:BD:BA:67:55:A6:1D:E5:A6
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019A4D73D928493C299C326B4F5FCE61743F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:29 +0000
Manifest this update: Tue 04 Nov 2025 06:00:29 +0000
Manifest next update: Wed 05 Nov 2025 06:00:29 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: CoFr9oTXoyOoTkclC2KR5K888RGAavpT3rL3Vc8P+bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d9:28:49:3c:29:9c:32:6b:4f:5f:ce:61:74:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Nov 4 06:00:29 2025 GMT
Not After : Nov 5 06:00:29 2025 GMT
Subject: CN=bf2fc0cf61203de461c176c5bdba6755a61de5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:9f:8b:64:4c:6c:69:fd:60:8b:cf:4e:3d:
2f:06:62:4a:54:a8:d9:ef:4d:ad:a1:80:e2:01:53:
58:31:ec:16:79:0e:54:76:13:dc:85:85:fa:fa:ee:
fd:fd:69:4d:32:a8:34:97:a5:8b:68:7d:38:f5:a7:
b4:c1:23:28:78:31:44:b1:33:b2:75:05:66:9c:12:
51:d2:13:c6:76:24:85:d2:b2:b7:59:e7:78:60:39:
be:70:29:30:6c:a8:78:17:9a:bc:05:1b:16:03:63:
f7:76:6c:3c:9e:58:46:d5:4a:6b:6a:4b:f4:b5:87:
0d:f6:ee:31:4b:6f:59:c7:7d:d8:0f:5e:14:a7:ca:
2d:32:10:3f:36:09:28:7a:74:55:c9:4f:15:a4:ad:
58:35:dd:f6:c4:45:f8:a6:59:e7:e9:3e:db:78:1e:
d7:e2:74:4a:f7:ef:9b:1f:c2:34:0c:10:6c:44:c8:
07:29:e9:49:11:99:ef:cc:37:39:56:83:ee:40:c0:
b8:1a:3d:cb:ed:e3:48:d6:4f:b1:bd:02:9d:ad:99:
44:86:76:87:f7:b4:a6:95:c5:26:f6:b1:4d:96:85:
92:6b:34:9e:65:8c:80:de:14:78:f8:61:1e:fc:22:
2b:10:bf:bf:ed:17:67:fa:37:c9:6f:aa:e4:b0:55:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:C0:CF:61:20:3D:E4:61:C1:76:C5:BD:BA:67:55:A6:1D:E5:A6
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f6:b1:4d:d8:d7:b2:58:5e:7c:79:f1:8a:7d:f9:64:27:0a:
df:0d:24:64:d3:74:cf:93:b8:8f:3c:80:27:75:eb:3d:34:a5:
54:7f:3d:70:8a:f7:5b:ea:8a:c6:51:a9:67:26:0a:e8:06:da:
89:63:cc:be:48:0e:4a:ec:ca:fa:cf:21:99:4e:fd:61:b8:b5:
c1:9b:35:e7:24:3e:e2:b7:e8:3e:a8:ed:de:01:df:9c:74:98:
04:b6:e5:91:a4:64:29:12:56:16:6e:07:c2:46:cf:d9:0f:ec:
2f:61:53:28:3f:69:4b:19:55:aa:b2:f7:bc:e3:7a:c5:22:a9:
8c:88:1b:b1:9c:6e:60:d8:e1:08:45:1e:e8:9e:c6:60:db:e8:
68:94:4f:3a:de:b8:4e:6f:e2:1b:af:92:87:25:9d:5e:ee:e3:
8e:83:5d:76:df:82:b3:82:b3:5b:89:1f:1c:9d:36:19:ef:49:
46:1d:f3:29:2e:14:cd:40:37:aa:f4:f9:28:91:1b:4a:ec:3d:
9d:c5:31:02:3a:9e:55:95:f9:ee:f0:de:d7:f8:55:d2:4b:5a:
73:a4:cd:57:2f:30:d0:29:f5:ca:7c:42:42:b3:9b:02:69:23:
bb:8d:0f:d8:54:72:b1:56:4a:35:7a:be:6a:fb:03:bc:3e:37:
5b:9d:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:45 2025 by rpki-client